Skip to content

Commit

Permalink
Merge pull request #7 from JupiterOne/update-integration-docs
Browse files Browse the repository at this point in the history
Update Integration Documentation
  • Loading branch information
VDubber authored Nov 9, 2022
2 parents 4c105f3 + 4bb6e6a commit fd53310
Show file tree
Hide file tree
Showing 3 changed files with 18 additions and 31 deletions.
11 changes: 0 additions & 11 deletions .github/workflows/gitleaks.yml

This file was deleted.

4 changes: 0 additions & 4 deletions .gitleaks.yml

This file was deleted.

34 changes: 18 additions & 16 deletions docs/jupiterone.md
Original file line number Diff line number Diff line change
@@ -1,23 +1,23 @@
# Integration with JupiterOne
# Malwarebytes

## Malwarebytes + JupiterOne Integration Benefits

- Visualize Malwarebytes configurations, findings, groups, and host agents
in the JupiterOne graph.
- Visualize Malwarebytes configurations, findings, groups, and host agents in
the JupiterOne graph.
- Monitor Malwarebytes findings within the alerts app.
- Monitor changes to Malwarebytes groups, configurations, and host agents
using JupiterOne alerts.
- Monitor changes to Malwarebytes groups, configurations, and host agents using
JupiterOne alerts.

## How it Works

- JupiterOne periodically fetches changes to configurations, findings,
groups, and host agents from Malwarebytes to update the graph.
- JupiterOne periodically fetches changes to configurations, findings, groups,
and host agents from Malwarebytes to update the graph.
- Configure alerts to reduce the noise of findings.

## Requirements

- JupiterOne requires a Malwarebytes account ID, API client ID and client
secret to interact with the API.
- JupiterOne requires a Malwarebytes account ID, API client ID and client secret
to interact with the API.
- You must have permission in JupiterOne to install new integrations.

## Support
Expand All @@ -29,29 +29,31 @@ If you need help with this integration, please contact

### In Malwarebytes

See instructions to
See instructions to
[Configure Malwarebytes Nebula integration](https://support.malwarebytes.com/hc/en-us/articles/360046452914-Configure-Malwarebytes-Nebula-integration-for-Cortex-XSOAR).

### In JupiterOne

1. From the configuration **Gear Icon**, select **Integrations**.
1. From the top navigation of the J1 Search homepage, select **Integrations**
2. Scroll to the **Malwarebytes** integration tile and click it.
3. Click the **Add Configuration** button and configure the following settings:

- Enter the **Account Name** by which you'd like to identify this Malwarebytes
account in JupiterOne. Ingested entities will have this value stored in
`tag.AccountName` when **Tag with Account Name** is checked.
account in JupiterOne. Ingested entities will have this value stored in
`tag.AccountName` when **Tag with Account Name** is checked.
- Enter a **Description** that will further assist your team when identifying
the integration instance.
the integration instance.
- Select a **Polling Interval** that you feel is sufficient for your monitoring
needs. You may leave this as `DISABLED` and manually execute the integration.
needs. You may leave this as `DISABLED` and manually execute the integration.
- Enter the **Account ID** of your Malwarebytes account.
- Enter the **Client ID** configured for this integration.
- Enter the **Client Secret** configured for this integration.

4. Click **Create Configuration** once all values are provided.

## How to Uninstall

1. From the configuration **Gear Icon**, select **Integrations**.
1. From the top navigation of the J1 Search homepage, select **Integrations**
2. Scroll to the **Malwarebytes** integration tile and click it.
3. Identify and click the **integration to delete**.
4. Click the **trash can** icon.
Expand Down

0 comments on commit fd53310

Please sign in to comment.